Static task
static1
Behavioral task
behavioral1
Sample
053430d68549e2ee4fbc14e8abf29f1b4edfda8810429c674e1654eef88f03b5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
053430d68549e2ee4fbc14e8abf29f1b4edfda8810429c674e1654eef88f03b5.exe
Resource
win10v2004-20220812-en
General
-
Target
053430d68549e2ee4fbc14e8abf29f1b4edfda8810429c674e1654eef88f03b5
-
Size
224KB
-
MD5
002c15b20b531a264bb8fdb063e4e380
-
SHA1
910ff5ede185aea8444c3cd125d96d39c6668515
-
SHA256
053430d68549e2ee4fbc14e8abf29f1b4edfda8810429c674e1654eef88f03b5
-
SHA512
c3a506d98e7e13f4c081e86c04d274fb2d2a02f6bc1970f7c46c30719bb46cdd589f42ced6e3788d068fa538d4f7e797247616ce2277b6251655f0c0ea8529df
-
SSDEEP
3072:RlxBsqIOltCis+GkfDDffffNfffLffffnWz1MknbkVnNx1XvdfmyHzre:RlrUMkbkVdFf9W
Malware Config
Signatures
Files
-
053430d68549e2ee4fbc14e8abf29f1b4edfda8810429c674e1654eef88f03b5.exe windows x86
f99e607432d62d0206e8333afa9f927c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
PropertySheetA
kernel32
GetThreadTimes
GetProcessWorkingSetSize
FindAtomA
GlobalGetAtomNameA
HeapDestroy
SetHandleCount
HeapAlloc
HeapFree
GetModuleHandleA
GetCommandLineA
GetVersion
HeapCreate
VirtualFree
VirtualAlloc
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
MultiByteToWideChar
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
GetStdHandle
GetFileType
RtlUnwind
LCMapStringA
LCMapStringW
SetStdHandle
CloseHandle
GetWindowsDirectoryA
LoadResource
LockResource
lstrlenA
lstrcpyA
FindClose
FindFirstFileA
GetDiskFreeSpaceA
Sleep
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
GetFileAttributesA
lstrcatA
GetModuleFileNameA
GetSystemDefaultLCID
MulDiv
ExitProcess
FindNextFileA
RemoveDirectoryA
GetStartupInfoA
WaitForSingleObject
CreateProcessA
CompareStringA
FindResourceA
ReadFile
GetLastError
lstrcpynA
lstrcmpA
FormatMessageA
GetSystemDirectoryA
GetTempPathA
LoadLibraryA
GetTempFileNameA
FreeLibrary
DeleteFileA
GetProcAddress
DosDateTimeToFileTime
WriteFile
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesA
GetPrivateProfileStringA
CreateDirectoryA
SetFilePointer
GetSystemTimeAsFileTime
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
IsDebuggerPresent
GetTimeZoneInformation
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
IsValidCodePage
InitializeCriticalSectionAndSpinCount
HeapReAlloc
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
HeapSize
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 121.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 137KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ